JWT Decoder
Paste a JSON Web Token to inspect its header and payload and to see exp, iat and nbf as readable UTC dates. Decoding happens locally in your browser, which matters because tokens can grant access to real accounts.
Also known as: decode jwt, jwt parser, json web token decoder, jwt debugger.
This tool decodes only. It does not verify the signature.
Your data is processed locally in your browser and is not uploaded to our servers.
Features
- Header and payload as formatted JSON
- Expiry and issue times in UTC
- Local processing, nothing uploaded
How to use the JWT Decoder
- Paste the token.
- Click Decode JWT.
- Check the claims and times.
Examples
Structure of a JWT
header.payload.signature
Frequently asked questions
Does this verify the signature?
No. It only decodes. Verification needs the secret or public key and must be done on your server.
Is a decoded JWT secret?
The payload is only encoded, not encrypted, so anyone holding the token can read it. Do not put secrets in it.